Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Credential Access/ T1606

T1606Forge Web Credentials

T1606 — Forge Web Credentials is a MITRE ATT&CK technique in the Credential Access tactic. Clankerusecase tracks 1 detection use case covering it and 1 threat-intel article citing it.

Credential Access
View on the matrix → Filter Detection Library MITRE official spec ↗
1Use cases
1Articles
2Sub-techniques
1Tactic

Sub-techniques (2)

T1606.002 · SAML TokensT1606.001 · Web Cookies

Use cases covering this technique (1)

[LLM] Forged unsigned (alg:none) JWT Bearer token reaching Apache Camel route (CVE-2026-53913) Bespoke exploit · alerting SP

Articles citing this technique (1)

crit [GHSA / CRITICAL] CVE-2026-53913: Apache Camel: KeycloakSecurityPolicy has Improper Authentication, Missing Authentication for Critical Func art-243